A lot of spam getting through

[Anthony Peacock]

Billy A. Pumphrey wrote:
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
>> bounces at lists.mailscanner.info] On Behalf Of Anthony Peacock
>> Sent: Wednesday, May 02, 2007 4:53 AM
>> To: MailScanner discussion
>> Subject: Re: A lot of spam getting through
>> So, help us out and show us the scores and headers from one that does
>> get through.  We might be able to see where they are failing then.
>>
>> Even better...  Save one of the misdiagnosed emails as a text file,
> post
>> it to a web address and let us know.  We can then run that email
> through
>> our systems and tell you what scores we get and what rules helped.
>>
> 
> I am having trouble getting the testing to work, or knowing how to test
> it.  I have saved some messages from Oulook with the extension of .msg.
> When I run a spamassassin -t message.msg it returns a bunch of junk and
> then the score:
> 
> Content analysis details:   (51.5 points, 5.0 required)
> 
>  pts rule name              description
> ---- ----------------------
> --------------------------------------------------
> -0.0 NO_RELAYS              Informational: message was not relayed via
> SMTP
>  2.5 MISSING_HB_SEP         Missing blank line between message header
> and body
>  2.3 MANGLED_DOSE           BODY: mangled dose
>  2.3 MANGLED_OFF            BODY: mangled off
>  2.3 MANGLED_YOUR           BODY: mangled your
>  2.3 MANGLED_FORM           BODY: mangled form
>  2.3 MANGLED_HERE           BODY: mangled here
>  2.3 MANGLED_HALF           BODY: mangled half
>  2.3 MANGLED_TIME           BODY: mangled time
>  2.3 MANGLED_MEDS           BODY: mangled med(s)
>  2.3 MANGLED_GIRL           BODY: mangled girl(s)
>  2.3 MANGLED_FROM           BODY: mangled from
>  2.3 MANGLED_LOVE           BODY: mangled love
>  2.3 MANGLED_TEXT           BODY: mangled text
>  2.3 MANGLED_LOOK           BODY: mangled look(s)
>  2.3 MANGLED_SPAM           BODY: mangled spam
>  2.3 MANGLED_PRIOR          BODY: mangled prior
>  2.3 MANGLED_PLEASE         BODY: mangled please
>  2.3 MANGLED_TRNFER         BODY: mangled TRANSFER
>  2.3 MANGLED_TOOL           BODY: mangled tool
>  3.5 BAYES_99               BODY: Bayesian spam probability is 99 to
> 100%
>                             [score: 1.0000]
>  2.2 NULL_IN_BODY           FULL: Message has NUL (ASCII 0) byte in
> message
>  1.8 MISSING_SUBJECT        Missing Subject: header
>  0.0 UPPERCASE_25_50        message body is 25-50% uppercase
>  0.1 TO_CC_NONE             No To: or Cc: header
> -0.0 NO_RECEIVED            Informational: message has no Received
> headers
> 
> (then some more junk)
> [root at WoodenMS2 spamemail]#
> PuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPu
> TTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTT
> YPuTTYPuTTYPuTTYPuTTYPuTTYTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPuTTYPu
> 
> 
> Does the testing support .msg files?  Also what is the best way to
> convert the email to text and have it correct?

I think the msg file format is an Outlook specific file format.  You 
need to find a way to save the messages as plain text files with all the 
headers intact.

-- 
Anthony Peacock
CHIME, Royal Free & University College Medical School
WWW:    http://www.chime.ucl.ac.uk/~rmhiajp/
"If you have an apple and I have  an apple and we  exchange apples
then you and I will still each have  one apple. But  if you have an
idea and I have an idea and we exchange these ideas, then each of us
will have two ideas." -- George Bernard Shaw